oauth2.dev

updated_at

OpenID_Foundation_Artifact_Binding_Working_Group

Registry Context

The updated_at claim gives the time when the End-User's information was last updated.

Technical Summary

In OpenID Connect Core, updated_at is a Standard Claim with JSON number type, representing seconds from 1970-01-01T00:00:00Z UTC until the update date/time.

When Used

It can appear among Standard Claims returned in a UserInfo Response or ID Token, and is included in the default profile Claims requested by the profile scope.

Normative Requirements

OpenID Connect implementation

OPTIONAL
1
  1. openid-connect-core-1_0 - Section 5.4

    Support the profile scope value, which requests access to the default profile Claims including updated_at..

    Condition: When using OpenID Connect scope values to request Claims.

    OpenID Connect defines the following scope values that are used to request Claims: OPTIONAL. This scope value requests access to the End-User's default profile Claims, which are: name, family_name, given_name, middle_name, nickname, preferred_username, profile, picture, website, gender, birthdate, zoneinfo, locale, and updated_at.

Validation Guidance

info

If present, validate updated_at as a JSON number representing seconds since 1970-01-01T00:00:00Z UTC.

info

If implementing profile scope handling, treat updated_at as one of the default profile Claims requested by that scope.

Reference

Details

Entry Id
updated_at
Claim Name
updated_at
Claim Description
Time the information was last updated
Change Controller
OpenID_Foundation_Artifact_Binding_Working_Group
Reference
OpenID Connect Core 1.0 - Section 5.1